CVE-2014-0174 is a vulnerability in Red Hat Enterprise Mrg
Published on July 11, 2014
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Products Associated with CVE-2014-0174
Want to know whenever a new CVE is published for Red Hat Enterprise Mrg? stack.watch will email you.
Exploit Probability
EPSS
0.24%
Percentile
46.48%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.